DO NOT VISIT CURVE FINANCE SITE! DNS HIJACK!

This has been confirmed by the team in a post on their X account here: https://x.com/curvefinance/status/1922040492121829678

The team stating their project's entire (root) domain has been "hijacked" means theytire (root) domain has been "hijacked" means the It's unknown how this attack was pulled off or exactly how their DNS was "hijacked".

1. In this scenario, the site you visit may look exactly like the normal Curve Fi site you're used to. However, you're actually getting redirected to an attacker's IP instead. This would allow them to siphon & steal any and all funds transacted or perhaps even accessed (via Metamask modal) on site.

2. Anything that is "[subdomain].curve . fi" should also be considered compromised. Any and all entities that load up assets or other resources online from that root (or sub-) domain should be considered compromised.